Abnormal Security vs. Darktrace vs. Mimecast Email Security Cloud Integrated

Another local organization was compromised, and we were one of the targets of their further attempts. We were 100% protected because the behavioral analysis protected us, but also allowed me to contact that organization and report their compromise. This has actually happened more than one time since going live.

Incentivized

Darktrace is a product well suited for the vast majority of infrastructures and helps monitoring and responding to threats based on the network in a very elastic way. This is a product based on on-premise infrastructures that hosts its machines locally, of course it can be technically difficult to monitor an entire On-Cloud infrastructure but even there there's room for sensors and monitoring, not to mention the SaaS and mail integration that completes the product.

Incentivized

If you're using the Microsoft 365 ecosystem, Mimecast Email Security CI is a must-have, as it adds an extra layer of email security. With advanced email threat detection capabilities, this tool handles internal threat incidents, ransomware, and phishing, and is effective at scanning attachments and URLs. It is a reliable/effective email security solution for business.

Incentivized

• Spam filtering...we have been able to turn our spam sensitivity down on Exchange allowing more legitimate messages through to user inboxes.
• Malicious email filtering...we experienced several successful phishing attacks over the past year. Abnormal Security has prevented hundreds of individual campaigns since going live in August '22. I cannot thank them enough!
• Automated response for reported emails...my team is small and we do not have enough hours in a day to review and respond to each reported email. Abnormal Security performs additional analysis on those reports and automatically responds for us. If the message is spam or malicious, copies of those emails are looked for throughout the server and deleted.

Incentivized

• Uses it Al model UEBA to detect anomalies in the behaviour of not only the users in a corporate network but also the routers, servers, and endpoints in that network.
• Provides a visualisation of both egress and outbound network traffics flowing in and out of the organisation.
• Darktrace comes with it autonomous AI model detection and responses capabilities.
• Darktrace as an AI next generation NDR solution, prevents ,contains and quarantines malicious traffics from and into the corporate network.

• Simplicity: Once set up, Mimecast Advanced Email Security is easy to use, intuitive, and simple. This reduces onboarding time with new employees.
• Robust Audit Trail: Being able to see what happened with specific emails, why things happened, and who was responsible for them helps to reduce troubleshooting time as well as improving overall email observability.
• Clean Interface: Mimecast Advanced Email Security is a Swiss-Army-Knife of email security. There are many different configurations and complex rules that can be implemented. To make this manageable Mimecast Advanced Email Security has implemented a simple and clean UI. Being able to favorite commonly used features makes a huge difference in usability.
• Simple SSO Integration: This seems like a no-brainer, but its odd to see how many SaaS products either don't support SSO, or make it so complicated and convoluted that setup and maintenance becomes a fully time job.

Incentivized

• None so far, I have been extremely happy with their service.

Incentivized

• There are few areas that I would say need to be improved; their customer support portal allows you to log tickets with any suggestions or things you feel the product is missing, and they will generally show you how to achieve what you want, or in some cases, introduce it as a feature in a later update.

Incentivized

• I would like to see some additional improvement around the attachment protection, specifically what may be getting caught and what types of files are attempting to be delivered via email by impersonators.
• The Targeted Threat Protection is a great product, and I wish there was a dashboard for this service where we could easily see the types of emails and/or links that have been caught as part of the protection module that could be shared with executives.
• Finally, I feel that the phishing protection is great and honestly don't believe there should be much improvement needed there.

Incentivized

It's a powerfull product that help administrators to provide email security to our organization.

Good metrics about received emails that help us to determine in doubt case if the email is a false positive or it's malware.

They're improving the product releasing continuous updates and have mobile phone app to manage it.

Incentivized

There is no question as to the value of the product to the business and the disruption of changing vendors would not be worth any savings possibly achieved by switching.

Incentivized

The Darktrace toolset is very expansive, allowing it to handle many different tasks, but this leads to a user interface that is sometimes not at all intuitive. Icons don't always make sense visually, and the associated tool tips do not always provide enough detail on what action the button performs

Incentivized

Mimecast advanced email security is an excellent tool, and even better, all the tools can be accessed from a single console. One thing I love about Mimecast is that when you add features to your account, they are automatically added to your console, which you already have experience with. No need to learn a new console.

Incentivized

Overall, it's very good, but I do remember a few times in the past year we have seen some availability issues.

Incentivized

Pages need to consistently load quickly. Sometimes good, sometimes not.

Incentivized

Darktrace support is excellent in my experience. They send a competent engineer on-site to provide on-boarding training. They were also very responsive in responding to questions and concerns. Having an individual point of contact who is a competent network and security engineer is not a common experience, at least for me.

Incentivized

When calling them you get best in the world customer services but as previously mentioned their online community and capabilities are a bit lacking. They want you to log into their portal to see updates on issues (vs. using a public facing service) and I rarely find the answers to my issues in electronic format. Their online presence is only helpful with the simplest of issues.

Incentivized

We did not have in-person training. All was done through meetings and on phone.

Incentivized

Training was good from Mimecast as well as the Mimecast knowledgebase.

Incentivized

Easy to set up and configure, but did have Mimecast assistance.

Incentivized

Abnormal Security blocks malicious emails that both PhishER and Cisco Secure Email Threat Defense miss. One thing that PhishER does have is the ability to flip a malicious message into a user education phishing email. That's cool, but I think we can just copy/paste the same info into a custom campaign.

Incentivized

We did NOT select Darktrace. OSSIM/AlienVault is a more mature product and it provided better intelligence and reporting. The end user interface is much easier to use - and you can tell built form engineers who have had to do the work. My suggestion for anyone considering Darktrace, is to get the price upfront; do a 30/60 onsite trail; and do the same thing, at the same time, with AlienVault. AlientVault will win every time. I say that because that's exactly what I did.

Incentivized

Mimecast Advanced Email Security is FAR superior. Sophos practically gave us the email for free and we still didn't want it. Sophos also does not do both Gateway and API properly. Mimecast Advanced Email Security's AI-Powered net is next level.

Incentivized

The solution continues to grow and add features.

Incentivized

Professional services for our setup was excellent, quick and knowledgeable.

Incentivized

• Preventing compromises that have historically led to payroll or accounts payable threats.

Incentivized

• One big positive is how it helps us with the security assessments that clients have done on us. They are looking to see if we know how we might have unusual/malicious traffic running on the network.
• If you have a small network and only need 1 appliance, it can be a good ROI and peace of mind.
• You could go down a hole in trying to spend time looking at all of your traffic with this software. You need to focus only on what it is showing as potential bad traffic.

Incentivized

• Enhanced email security across the business.
• This product has reduced the risk of being hit by malware/phishing; Mimecast has been holding emails efficiently after reviewing emails.
• The reporting side is practical, helps create a business case for the product, and shows its worth.

Incentivized